Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7e25b7e4017e4a68efd019ef/4/323630353a316330303a6666303a3a2f34342d3434203d3e203136373837.roa
File:                     323630353a316330303a6666303a3a2f34342d3434203d3e203136373837.roa (raw, json)
Hash identifier:          3xU+Mz+ycD4VQOig8KQfbjLQJ5Jfxan213/XlMDbiD8=
Subject key identifier:   DE:2F:05:AB:4E:03:E9:AE:C0:30:39:9B:5E:AF:78:93:CA:4C:85:2C
Certificate issuer:       /CN=15151ee44c65aa90db6540448bd32233d10108e762bcf79dbd
Certificate serial:       6630DBD414BE6C6720AC101ECC115B9CF9B95A3C
Authority key identifier: 37:14:44:4A:3C:87:A5:5B:1D:9F:A1:61:A4:C9:16:E5:F6:49:11:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6b89697f-b107-49cb-8db4-c6a39e36ce3e/15151ee44c65aa90db6540448bd32233d10108e762bcf79dbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e4a68efd019ef/4/323630353a316330303a6666303a3a2f34342d3434203d3e203136373837.roa
Signing time:             Tue 11 Jan 2022 18:35:35 +0000
ROA not before:           Tue 11 Jan 2022 18:30:35 +0000
ROA not after:            Tue 10 Jan 2023 18:35:35 +0000
asID:                     16787
IP address blocks:        2605:1c00:ff0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:30:db:d4:14:be:6c:67:20:ac:10:1e:cc:11:5b:9c:f9:b9:5a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15151ee44c65aa90db6540448bd32233d10108e762bcf79dbd
        Validity
            Not Before: Jan 11 18:30:35 2022 GMT
            Not After : Jan 10 18:35:35 2023 GMT
        Subject: CN=DE2F05AB4E03E9AEC030399B5EAF7893CA4C852C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:51:55:f3:ec:4d:2f:6d:c6:01:ce:2e:01:aa:
                    c4:eb:76:97:3d:bc:eb:38:ef:50:5f:47:92:bf:84:
                    9b:e5:33:00:bb:ff:a2:f9:45:d7:ac:72:16:fb:aa:
                    ed:25:db:43:d5:a3:c8:05:ca:91:42:17:b9:59:1b:
                    96:7b:c6:21:88:55:25:b2:a3:46:08:ca:f5:11:c5:
                    f1:1a:95:14:cb:a8:45:98:3d:2a:63:91:cb:1f:35:
                    8d:20:df:07:a9:a6:cd:72:14:be:2c:76:9d:dd:31:
                    79:45:08:95:c0:f6:3f:8e:53:c9:e3:29:30:0f:56:
                    83:24:c6:7f:8b:83:2b:4c:a6:59:6c:c3:84:ff:10:
                    b3:93:af:46:c1:fd:86:36:14:a7:87:e7:d2:ce:39:
                    e4:f4:bc:03:42:3b:9b:a3:a1:e1:88:58:69:31:96:
                    2c:d0:23:9a:15:37:7d:6e:7f:5e:48:de:b2:a4:f5:
                    df:a9:7d:74:9f:f8:a3:62:05:4b:3d:7c:04:6a:6d:
                    00:80:38:65:28:fa:59:89:b9:7c:74:80:d4:9d:59:
                    4f:b2:71:11:75:6c:29:09:f6:23:22:9a:8e:e6:14:
                    59:cd:01:4a:a3:f5:bb:27:17:d5:29:1b:c5:42:55:
                    4b:4b:dc:c7:5f:0f:db:f0:32:7c:52:d0:f8:41:f7:
                    80:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2F:05:AB:4E:03:E9:AE:C0:30:39:9B:5E:AF:78:93:CA:4C:85:2C
            X509v3 Authority Key Identifier:
                keyid:37:14:44:4A:3C:87:A5:5B:1D:9F:A1:61:A4:C9:16:E5:F6:49:11:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e4a68efd019ef/4/3714444A3C87A55B1D9FA161A4C916E5F64911DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6b89697f-b107-49cb-8db4-c6a39e36ce3e/15151ee44c65aa90db6540448bd32233d10108e762bcf79dbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e4a68efd019ef/4/323630353a316330303a6666303a3a2f34342d3434203d3e203136373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         8d:d1:12:18:d7:1d:c9:19:bb:3b:fd:db:c1:9b:49:f9:e7:7f:
         52:90:ef:2f:ff:43:cc:86:6d:34:4e:4b:2f:a7:53:ef:e5:85:
         47:3c:f5:0c:1d:96:5e:90:74:84:e6:49:25:46:46:3d:05:a3:
         fe:ff:a3:82:53:e6:1c:fe:bb:e7:a4:ee:ff:42:cf:cf:5b:29:
         5f:f2:0b:fc:1c:1c:72:92:5b:ed:a9:e7:a3:09:e6:35:49:8f:
         80:4e:2d:19:20:cc:28:27:0c:e7:ca:f7:34:ba:38:89:cc:cc:
         05:9b:34:e2:d6:5c:f7:63:66:1e:8f:5f:ee:3a:c9:15:4e:66:
         7f:23:f6:71:42:1c:79:c2:eb:07:e3:0c:74:88:f7:30:40:6a:
         49:5e:35:20:5a:ce:87:92:71:86:31:00:db:99:4d:6c:75:2d:
         f5:a0:e8:c4:97:8e:0d:ef:04:07:20:8a:3b:18:5d:ff:8b:e6:
         36:96:84:1a:3d:8e:79:0b:7b:d5:6e:0e:c9:da:8f:67:42:63:
         c8:de:8b:d1:60:3b:96:f0:74:4d:ea:cf:8b:27:5e:35:61:35:
         97:cf:81:07:57:93:3b:36:6b:12:6e:80:60:a8:e8:ed:c6:f4:
         3a:55:8b:f8:0c:6d:79:5c:93:b5:6a:96:21:dd:6e:1a:87:46:
         22:41:39:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----